This Certified Application Security Engineer (CASE) is a hands-on, Instructor-led, comprehensive application security course, which encompasses security activities involved in all of the phases of Software Development Lifecycle (SDLC). The course also focuses on selecting and implementing the right security strategies, guidelines, and practices that are widely accepted and applicable to most environments used today.
EC-Council 
This Certified Application Security Engineer (CASE) is a hands-on, Instructor-led, comprehensive application security course, which encompasses security activities involved in all of the phases of Software Development Lifecycle (SDLC). The course also focuses on selecting and implementing the right security strategies, guidelines, and practices that are widely accepted and applicable to most environments used today.
Students who successfully complete this class will be able to:
1. Understand the importance of Application Security and identify the most Common Application-level Attacks
2. Understand Security Requirement Engineering (SRE) and describe Abuse Cases, Abuse Case Modeling, Security Use Cases, and Security Use Case Modeling
3. Learn about securing the applications in all the phases of Software Development Life Cycle (SDLC)
4. Gain Knowledge and skills in gathering security requirements, designing secure application architecture, and implementing secure coding practices.
5. Learn Authentication and Authorization defensive techniques in Web Forms, ASP.NET Core, and MVC
6. Learn secure cryptographic practices, defensive coding practices against Session Hijacking attacks and discuss various Session Management Techniques in ASP.NET core
7. Comprehend the need of secure Exception Handling and learn defensive coding practices against Information Disclosure, Improper Error Handling
8. Expertise in implementing coding practices, performing Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and secure deployment
9. Understand the importance of secure deployment and discuss security practices at Host Level, Network Level, Application Level, IIS level, .NET Level, SQL Server Level
